Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/mrsXbB4Pb0U4vZJK2pChd74Be0E.roa
File: mrsXbB4Pb0U4vZJK2pChd74Be0E.roa (raw, json)
Hash identifier: qLz+NYAjcShPVvYM7x7BlheDNXNm1/4NPhJKKacuGXM=
Subject key identifier: 9A:BB:17:6C:1E:0F:6F:45:38:BD:92:4A:DA:90:A1:77:BE:01:7B:41
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 38C2381B
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/mrsXbB4Pb0U4vZJK2pChd74Be0E.roa
Signing time: Thu 30 Jun 2022 22:00:02 +0000
ROA not before: Thu 30 Jun 2022 22:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48854
IP address blocks: 185.134.28.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
80.70.0.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
94.143.8.0/21 maxlen: 21
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
217.61.236.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
185.25.141.0/24 maxlen: 24
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
185.223.24.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
212.237.248.0/23 maxlen: 23
194.150.112.0/22 maxlen: 22
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
2a06:eac0::/29 maxlen: 48
2a02:2338::/32 maxlen: 48
2a02:2339:4000::/34 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952252443 (0x38c2381b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jun 30 22:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9abb176c1e0f6f4538bd924ada90a177be017b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:2b:8a:60:85:08:5d:6f:9a:b8:35:71:e5:
5d:59:52:c4:4a:b4:94:bb:86:c9:dd:ca:79:6b:f3:
dc:1c:32:10:a6:88:04:44:8c:97:ed:42:38:b9:a8:
74:03:42:14:09:58:69:10:10:c2:67:6f:5d:fc:00:
b7:81:d9:e7:2e:55:ec:af:01:70:c1:62:21:a9:67:
e8:2e:e6:fc:08:66:d6:ac:d3:df:91:e4:99:a4:d1:
ed:ca:68:af:5f:2f:38:9f:af:52:44:f9:ac:7f:34:
9a:40:0f:4d:08:ab:36:4b:04:70:73:b6:da:2c:ab:
2f:bb:c3:61:a0:36:d2:2d:11:8a:13:1d:16:2a:fe:
55:35:44:e3:0d:ca:3f:dc:14:9b:42:17:7c:01:57:
80:a1:04:98:5e:ab:a8:22:89:56:32:7c:db:e9:ba:
f4:ea:cb:20:7b:67:12:b1:36:0a:a6:94:07:f4:72:
db:01:2a:88:18:11:3f:95:77:76:21:17:aa:38:bf:
12:a6:28:b3:f8:d4:64:1e:af:c0:05:f8:3b:d7:c4:
c3:de:48:55:a5:85:37:fe:ac:87:d0:48:9a:66:55:
da:32:9b:6b:44:00:43:d8:36:bd:46:47:50:6e:88:
73:b4:1c:36:29:73:2f:ef:66:03:17:47:80:a6:71:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:17:6C:1E:0F:6F:45:38:BD:92:4A:DA:90:A1:77:BE:01:7B:41
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/mrsXbB4Pb0U4vZJK2pChd74Be0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.0.0/23
89.188.72.0/21
93.191.152.0/21
94.143.8.0/21
94.231.96.0/20
185.20.204.0/22
185.21.40.0/22
185.25.141.0/24
185.134.28.0/22
185.221.36.0/22
185.223.24.0/22
194.150.112.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.236.0/22
IPv6:
2a02:2338::/32
2a02:2339:4000::/34
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
48:e8:9c:30:79:aa:bf:d5:9f:c0:32:fb:9f:6f:91:04:17:ff:
34:f6:d8:a8:9c:01:7e:15:d8:fb:3c:d0:4b:9b:a9:3c:75:a6:
ab:9a:f1:fc:a3:34:f3:59:67:d8:20:a1:a1:dc:07:d4:37:ff:
2f:e1:e5:83:83:cc:d5:8c:e0:af:e5:f2:8c:1d:f1:5b:bd:56:
d6:68:d3:5d:34:e8:9b:90:7b:c5:ee:84:81:17:b4:77:3e:23:
f6:ed:3b:4c:ed:22:04:e6:eb:41:6b:1c:8b:b2:d5:51:3f:4a:
e1:01:de:26:93:2a:a7:ef:34:a6:e3:76:9d:2c:22:12:80:d3:
9d:12:3f:a2:d8:2a:42:35:27:11:10:10:fa:8c:94:8f:2f:c0:
8a:90:ae:59:2f:85:5d:05:02:77:2d:fe:a6:4b:69:e3:87:bf:
85:68:7b:40:c8:0d:75:3c:c6:5b:9b:67:31:98:3c:9b:bb:e3:
2a:fb:87:50:f2:21:99:c6:52:53:56:0c:4a:9b:95:75:ca:41:
c3:1d:f1:a4:8d:ff:a3:fb:e6:6f:5c:2c:dd:47:5d:96:00:3f:
ac:4f:6f:dc:17:10:eb:69:e1:09:96:ee:ff:94:f4:4c:21:8b:
ef:ab:27:9a:8d:99:0d:f4:53:a2:36:e1:4f:9f:d0:f8:9a:d5:
13:91:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:51 2024 by rpki-client on console-ams.rpki-client.org